Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: UW1Y5VAcyJmjDVCDDAYsKbxJNPzZyMLsdMI3j+PYkS8=
Subject key identifier: 77:62:F5:9C:EB:56:AE:47:87:B8:A3:40:AC:AA:B4:4A:A9:28:D5:F2
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 01A0EC659A1B5BFC845CDB9EBE79C4F2F8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 0815
Signing time: Tue 29 Sep 2026 09:01:16 +0000
Manifest this update: Tue 29 Sep 2026 09:01:16 +0000
Manifest next update: Wed 30 Sep 2026 09:01:16 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: G3zUvHfsu72c2+N22kgAysu+Dw8ycVNl6RHVzCBZH5g=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:9a:1b:5b:fc:84:5c:db:9e:be:79:c4:f2:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Sep 29 09:01:16 2026 GMT
Not After : Sep 30 09:01:16 2026 GMT
Subject: CN=7762f59ceb56ae4787b8a340acaab44aa928d5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:16:1c:22:ff:1d:e5:81:ee:e9:7c:ae:03:
ed:9a:24:d6:a8:e4:f9:d0:bd:d7:63:30:d9:63:f4:
5c:ad:21:e8:09:f0:e4:da:30:41:13:50:56:f1:5b:
c8:35:13:44:f0:a0:62:46:fc:9d:76:21:18:4c:57:
28:a6:b3:49:80:16:c9:df:66:26:4d:3f:21:78:60:
08:08:15:c7:4b:2d:f8:97:01:cd:4b:2f:04:da:2d:
d3:eb:64:e6:1c:9e:66:1f:05:87:ef:19:c1:1f:5b:
0f:80:b7:2c:94:0e:96:5c:f3:81:c4:96:c7:4a:53:
60:94:9b:f4:58:8b:24:9d:86:81:f1:18:b7:d8:37:
0e:18:8b:6e:36:77:f0:c8:54:35:de:ac:86:d7:26:
a4:3d:db:f2:7c:38:a1:94:5c:9c:ce:08:77:ef:62:
b1:68:db:32:0b:5f:30:e3:d7:d1:48:6a:66:0c:77:
77:33:c5:8f:78:c9:e4:52:82:b9:62:f6:e3:a3:b6:
1f:48:d5:ff:5f:1e:3c:97:fc:85:e5:73:ee:27:1b:
00:05:2a:27:37:e3:80:c0:8b:45:29:d7:0a:b4:3e:
99:9b:1d:6d:5f:26:7d:5b:3b:1d:94:2e:6f:99:b6:
31:15:2b:96:b1:52:f5:13:3b:e5:28:21:cf:a8:d8:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:F5:9C:EB:56:AE:47:87:B8:A3:40:AC:AA:B4:4A:A9:28:D5:F2
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:80:82:db:a7:0a:43:c8:37:17:e4:90:61:1a:a9:25:3f:
15:c3:00:ca:ea:93:a8:ac:2b:c7:58:9b:47:10:62:57:3f:fd:
1f:53:ff:6e:12:ea:1d:22:73:98:26:ba:1c:52:8b:5c:c7:04:
42:22:d2:c4:ad:45:3c:0c:03:ab:78:cc:9b:14:e2:d5:29:22:
7c:ef:0b:3b:43:63:b0:70:1a:5c:b5:b4:4c:1e:d5:77:a6:9f:
65:27:78:84:a5:bf:d6:08:e3:b9:3a:d8:e7:12:6d:80:a9:41:
6e:df:dc:d9:62:6f:69:e4:1d:5d:1c:36:8a:5a:53:43:71:bc:
b4:01:49:f4:0e:c6:bc:32:eb:7b:8c:5c:e2:d2:fe:62:65:cc:
5e:8b:ba:50:75:9f:5e:05:e7:be:c3:b9:e6:46:e6:a8:0b:46:
1c:61:58:1a:f7:a4:46:4c:f0:62:74:38:9f:a4:90:5a:79:f9:
11:af:a6:1b:02:1b:8d:86:34:32:d5:e5:7f:2c:cb:5e:ba:40:
98:83:af:ae:62:c3:b6:8b:df:bc:b1:c3:82:e6:39:5b:d5:89:
40:0d:83:16:64:4b:d5:ce:44:66:89:68:6b:c7:81:af:aa:a8:
e0:09:93:68:23:ab:7e:38:f5:02:da:c2:d5:79:ee:6e:8e:f0:
66:fc:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:13:50 2026 by rpki-client